Windows Web Combat

By ESGI Advisor in Rogue Anti-Spyware Program | 174 views
Rate it:
1 Star2 Stars3 Stars4 Stars5 Stars (1 votes, average: 5.00 out of 5)
Loading ... Loading ...
More... More

Windows Web Combat Description

Image Screenshot

[+] Click Image to Enlarge

Windows Web Combat is a bogus anti-spyware program, which masquerades as a genuine Windows program. In truth, Windows Web Combat was designed by web fraudsters for malicious intentions, that is to damage computers and steal money from innocent PC users. Therefore, you should be careful and uninstall Windows Web Combat from the attacked PC immediately after detection until it’s too late. Windows Web Combat promotes itself as a trustworthy security suite but, in truth, it won’t protect your PC from any type of malware. Windows Web Combat uses many misleading techniques to fool affected computer users into thinking they have serious security issues with their PCs. Windows Web Combat detects and reports various imaginary malware detected on the compromised PC in order to scare victims into thinking their computers have been infected with lots of security threats. Windows Web Combat also displays fake pop-up security warnings for notifying users about certain PC problems.

Windows Web Combat spreads via Trojans and enters the targeted computer secretly without the victim’s permission and knowledge. Once the trial version invades the corrupted machine, it starts allegedly scanning the computer system and detects a variety of imaginary malware threats. Then, Windows Web Combat attempts to convince potential victims to purchase its nonexistent full version of the bogus software product. Windows Web Combat offers to buy its counterfeit security tool as a solution for extermination of all found PC infections. Do not be frightened by misleading tactics used by Windows Web Combat because all information it gives you is inaccurate and falsified. Windows Web Combat is a security risk to your PC, which has to be removed from the affected computer with a reputable anti-malware program.

Type: Rogue AntiSpyware Programs

How Can You Detect Windows Web Combat?

‘How Windows Web Combat Infects Your Computer’ Video

Windows Web Combat Removal Details

Windows Web Combat has typically the following processes in memory:

  • %AppData%\Protector-[RANDOM CHARACTERS].exe

Windows Web Combat creates the following registry entries:

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “rudbxijemb”
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-2-17_2″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “ID” = 0
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe

Important Article Disclaimer

ESG Support Center

This entry was last updated on 07/12/12 and posted on 07/12/12. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

Leave a Comment

Note: Abusive comments are not allowed. Please do not post comments regarding technical support issues. ESG customers that have issues with SpyHunter should open a customer support ticket.

*
To prove you're a person (not a spam script), type the security word shown in the picture. Click on the picture to hear an audio file of the word.
Click to hear an audio file of the anti-spam word

Home | SpyHunter Risk Assessment Model | Privacy Policy | End User License Agreement | Additional Terms and Conditions
Copyright 2003-2012. Enigma Software Group USA, LLC. All Rights Reserved.